cargo: bump the patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #3194 · google/comprehensive-rust

dependabot · 2026-06-01T02:51:55Z

Bumps the patch group with 7 updates in the / directory:

Package	From	To
log	`0.4.29`	`0.4.30`
serde_json	`1.0.149`	`1.0.150`
pulldown-cmark	`0.13.3`	`0.13.4`
zerocopy	`0.8.48`	`0.8.50`
http	`1.4.0`	`1.4.1`
tokio	`1.52.1`	`1.52.3`
reqwest	`0.13.3`	`0.13.4`

Updates log from 0.4.29 to 0.4.30

Release notes

Sourced from log's releases.

0.4.30

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.30] - 2026-05-21

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

9c55760 Merge pull request #725 from rust-lang/cargo/0.4.30
d1acb05 update docs on current MSRV and note latest bump in changelog
5068293 prepare for 0.4.30 release
7ccd873 Merge pull request #724 from rust-lang/feat/net-to-value
923dfaa fix up test cfgs
ecb7de8 gate net value impls on std
67bb4f6 run fmt
25f49fe rework net type capturing
7087dcb feat: impl ToValue for core::net types
67bc7e3 Merge pull request #723 from woodruffw-forks/ww/ci
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.3 to 0.13.4

Release notes

Sourced from pulldown-cmark's releases.

0.13.4

Fix panic in specific cases with TightParagraph.

What's Changed

fix: panic in parser iterator for TightParagraph in some cases by @Martin1887 in pulldown-cmark/pulldown-cmark#1096

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4

Commits

38e4d08 chore: cargo update
9c61031 chore: bump pulldown-cmark version to 0.13.4
709268f Merge pull request #1096 from pulldown-cmark/fix-1095
c1d4450 Add test case from 1097
6fea453 fix: panic in parser iterator for TightParagraph in some cases
See full diff in compare view

Updates zerocopy from 0.8.48 to 0.8.50

Release notes

Sourced from zerocopy's releases.

v0.8.50

What's Changed

[pointer] Ptr::iter takes self by value by @joshlf in google/zerocopy#3421

Full Changelog: google/zerocopy@v0.8.49...v0.8.50

v0.8.49

What's Changed

In test_ptr_try_cast_into_soundness, skip u128/i128 by @joshlf in google/zerocopy#3178

[docs] Generate rustdoc for explicit targets by @joshlf in google/zerocopy#3189

Optimize bounds checking by validating metadata against maximum by @jswrenn in google/zerocopy#3123

Publish Ptr[Inner] behind a --cfg by @joshlf in google/zerocopy#3387

[docs] Document --cfg=zerocopy_unstable_ptr on internal rendered docs by @joshlf in google/zerocopy#3388

New Contributors

@mdittmer made their first contribution in google/zerocopy#3381

Full Changelog: google/zerocopy@v0.8.48...v0.8.49

v0.8.49-alpha

What's Changed

[ci] Don't run on large runners by @joshlf in google/zerocopy#3379

Publish Ptr[Inner] behind a --cfg by @joshlf in google/zerocopy#3387

Full Changelog: google/zerocopy@anneal-v0.1.0-alpha.23...v0.8.49-alpha

Commits

f70e422 [pointer] Ptr::iter takes self by value (#3421)
5fc5d5b Release 0.8.49 (#3417)
0321b8e [anneal][exocrate] Upgrade to toml_const 1.3.0 (#3415)
1c1fe0b [anneal][v2][exocrate] Crate-level documentation (#3382)
275aff2 [anneal][v2] Independently vendor and patch toml_const (#3381)
2fcfb33 [anneal][v2] Initial commit of exocrate (#3376)
8811606 [docs] Document --cfg=zerocopy_unstable_ptr on internal rendered docs (#3388)
0402dfa Publish Ptr[Inner] behind a --cfg (#3387)
8772fc4 [ci] Don't run on large runners (#3379)
a3ad195 [anneal] README: Explain philosophy w.r.t. typing (#3351)
Additional commits viewable in compare view

Updates http from 1.4.0 to 1.4.1

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
ae48fb5 fix(uri): reject Path::from_shared/from_static if doesn't start with slash (#...
1ad200e refactor(uri): consolidate PathAndQuery::from_shared and from_static (#825)
d59d939 refactor: Remove usage of float instruction (#823)
ed680c4 tests: update to rand 0.10 (#818)
Additional commits viewable in compare view

Updates tokio from 1.52.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates reqwest from 0.13.3 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

What's Changed

fix(tls): improve rustls-no-provider panic message and add module docs by @smythg4 in seanmonstar/reqwest#3021

fix: do not lose the url in error when decoding json by @Dushistov in seanmonstar/reqwest#3026

Add tls_sslkeylogfile builder method by @passcod in seanmonstar/reqwest#2923

fix(redirect): strip sensitive headers on scheme change across redirects by @SAY-5 in seanmonstar/reqwest#3034

chore: upgrade MSRV to 1.85 by @seanmonstar in seanmonstar/reqwest#3038

chore: clean up minimal-versions CI job by @seanmonstar in seanmonstar/reqwest#3039

fix(http3): use happy eyeballs for h3 connect by @lyuzichong in seanmonstar/reqwest#3030

fix: update hickory-resolver to 0.26 and adjust code accordingly by @seanmonstar in seanmonstar/reqwest#3040

fix: remove unwrap in hickory initialization by @mat813 in seanmonstar/reqwest#3041

feat(https): support TLS 1.3 as min version under native-tls 🎉 by @AverageHelper in seanmonstar/reqwest#2975

Expose keep alive configurations in blocking client by @aeb-dev in seanmonstar/reqwest#3043

Prepare v0.13.4 by @seanmonstar in seanmonstar/reqwest#3046

New Contributors

@smythg4 made their first contribution in seanmonstar/reqwest#3021

@Dushistov made their first contribution in seanmonstar/reqwest#3026

@SAY-5 made their first contribution in seanmonstar/reqwest#3034

@mat813 made their first contribution in seanmonstar/reqwest#3041

@AverageHelper made their first contribution in seanmonstar/reqwest#2975

@aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

Changelog

Sourced from reqwest's changelog.

v0.13.4

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.

Add ClientBuilder::http2_keep_alive_* options for the blocking client.

Add TLS 1.3 support when using native-tls backend.

Fix redirect handling to strip sensitive headers when the scheme changes.

Fix HTTP/3 happy-eyeball connection creation.

Upgrade hickory-resolver to 0.26.

Commits

11489b3 v0.13.4
d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
fb7bf6a fix: remove unwrap in hickory initialization (#3041)
3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
9cbb65b chore: clean up minimal-versions CI job (#3039)
17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
Additional commits viewable in compare view

Bumps the patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.30` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.3` | `0.13.4` | | [zerocopy](https://github.com/google/zerocopy) | `0.8.48` | `0.8.50` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.1` | `1.52.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.3` | `0.13.4` | Updates `log` from 0.4.29 to 0.4.30 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.30) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `pulldown-cmark` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/raphlinus/pulldown-cmark/releases) - [Commits](pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4) Updates `zerocopy` from 0.8.48 to 0.8.50 - [Release notes](https://github.com/google/zerocopy/releases) - [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md) - [Commits](google/zerocopy@v0.8.48...v0.8.50) Updates `http` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.1) Updates `tokio` from 1.52.1 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.1...tokio-1.52.3) Updates `reqwest` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.3...v0.13.4) --- updated-dependencies: - dependency-name: http dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: log dependency-version: 0.4.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: pulldown-cmark dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: zerocopy dependency-version: 0.8.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 1, 2026

dependabot Bot requested review from djmitche, mgeisler and qwandor as code owners June 1, 2026 02:51

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 1, 2026

qwandor approved these changes Jun 1, 2026

View reviewed changes

qwandor enabled auto-merge (squash) June 1, 2026 10:05

dependabot Bot changed the title ~~cargo: bump the patch group with 7 updates~~ cargo: bump the patch group across 1 directory with 7 updates Jun 1, 2026

dependabot Bot force-pushed the dependabot/cargo/patch-ee97f03ea0 branch from 3fb90e5 to 9ac46c9 Compare June 1, 2026 10:08

qwandor merged commit 1a3101a into main Jun 1, 2026
43 checks passed

qwandor deleted the dependabot/cargo/patch-ee97f03ea0 branch June 1, 2026 10:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

cargo: bump the patch group across 1 directory with 7 updates#3194

cargo: bump the patch group across 1 directory with 7 updates#3194
qwandor merged 1 commit into
mainfrom
dependabot/cargo/patch-ee97f03ea0

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.4.30

What's Changed

New Contributors

Notable Changes

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Notable Changes

v1.0.150

0.13.4

What's Changed

v0.8.50

What's Changed

v0.8.49

What's Changed

New Contributors

v0.8.49-alpha

What's Changed

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.1 (May 25, 2026)

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

v0.13.4

tl;dr

What's Changed

New Contributors

v0.13.4

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited

Loading